Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a323a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666164343a323a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          z/6RbESwsd0TQXRJj2taFfn3/DqnetvRzE40G1NXGzU=
Subject key identifier:   7A:24:BB:74:D5:A6:9E:67:2F:42:4E:62:F6:99:8C:E1:C2:41:69:CA
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       7FD770BC004B2C720168B4B35B0DF59C35D604A3
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a323a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 04 Dec 2023 15:42:20 +0000
ROA not before:           Mon 04 Dec 2023 15:37:20 +0000
ROA not after:            Mon 02 Dec 2024 15:42:20 +0000
asID:                     29802
IP address blocks:        2602:fad4:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 11:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d7:70:bc:00:4b:2c:72:01:68:b4:b3:5b:0d:f5:9c:35:d6:04:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Dec  4 15:37:20 2023 GMT
            Not After : Dec  2 15:42:20 2024 GMT
        Subject: CN=7A24BB74D5A69E672F424E62F6998CE1C24169CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:b7:a4:9c:35:63:42:fe:e4:1c:00:9b:db:
                    9b:2a:09:77:e0:96:f4:6b:62:56:22:e5:ae:59:da:
                    03:f4:cb:1a:ff:84:c3:dd:2b:85:ac:02:5d:ff:5d:
                    d3:11:c4:30:d5:62:20:a8:1c:27:48:6c:29:49:74:
                    bc:2b:e5:0b:2e:bd:30:d0:21:8a:a9:0a:da:81:d5:
                    d8:84:c1:5e:d3:5e:7d:98:6d:65:d1:2f:30:ef:a5:
                    38:43:d1:41:ac:b1:24:0e:6b:a6:ea:da:a7:62:ba:
                    9d:49:6a:22:19:6b:b3:ba:09:b0:86:90:95:96:ee:
                    14:59:de:fd:1a:98:02:b3:f4:5d:ec:6b:e2:71:9e:
                    90:70:a3:06:5e:f2:49:09:37:77:f5:80:48:60:4c:
                    94:32:c4:5b:75:6d:1e:37:2a:37:e7:de:4d:42:8e:
                    81:b5:af:5e:07:66:86:21:cb:65:c3:28:e6:bb:7e:
                    87:ae:fc:e6:bb:09:f0:1a:c0:36:18:ca:61:33:1b:
                    49:f1:5c:f1:70:4c:23:47:a3:3b:88:17:99:40:f9:
                    46:38:33:50:da:7b:1d:e2:49:24:ba:cd:54:96:f5:
                    41:84:72:b9:94:f0:99:c7:f4:d7:70:42:6b:6a:c9:
                    56:4b:c2:dd:92:fb:ed:89:fd:61:d2:98:37:c7:58:
                    6a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:24:BB:74:D5:A6:9E:67:2F:42:4E:62:F6:99:8C:E1:C2:41:69:CA
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a323a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:04:b0:25:2a:fb:c1:7e:44:65:b4:9c:ba:98:eb:4e:15:
         f3:23:da:cb:fb:b1:b6:ec:27:2b:51:fd:79:bf:42:cd:f2:0c:
         68:72:a1:0d:31:81:15:6d:50:f9:61:95:c9:e4:1a:75:a7:ad:
         00:0f:74:df:e6:24:bc:2b:6a:d1:ed:57:90:a4:a0:b1:9c:ac:
         fc:ca:21:98:53:b1:9f:cf:5f:fb:12:16:fb:34:b0:c7:ea:75:
         eb:a9:ba:5d:3a:03:77:b3:e5:b8:21:68:f7:8c:8f:32:fb:5b:
         85:7a:35:57:9d:dc:93:cd:56:17:ab:25:30:2d:89:31:33:bb:
         bb:7d:ff:ff:cf:77:09:0b:91:48:2d:18:26:fc:89:77:34:c1:
         ef:42:1d:79:44:57:4e:3f:d3:55:0c:58:c7:ba:90:78:2f:fe:
         15:0c:b7:41:96:5f:94:3b:8c:87:04:07:c3:bd:a0:68:ba:ce:
         4c:2d:f3:70:3f:86:af:c7:ca:43:f9:57:f6:9e:e1:54:af:9a:
         06:ff:b7:38:b3:29:05:f2:78:da:8a:01:c8:66:27:64:f1:70:
         1e:d9:d7:12:e1:65:cd:04:b3:24:0b:39:fb:af:4e:8a:0d:f3:
         f9:4c:e7:27:e5:54:9f:09:b6:4f:fa:7c:4f:9c:01:44:f3:4f:
         96:63:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----